Privacy Policy

Last updated: 30 June 2026

1. About this Privacy Policy

This Privacy Policy explains how Pretty Sailing collects, uses, stores and protects personal information.

It applies when you visit our website, make an enquiry, book a course, complete a medical declaration, contact us, attend a course, or otherwise use our services.

In this policy, when we say “we”, “us” or “our”, we mean Pretty Sailing.

2. Who we are

Pretty Sailing is based in Gibraltar.

Pretty Sailing
Unit 8 Ocean Village Promenade
Gibraltar GX11 1AA

If you have any questions about this Privacy Policy or how we use your personal information, you can contact us at:

willow@prettysailing.gi

3. The personal information we collect

We may collect and use the following types of personal information:

your name;
your email address;
your phone number;
your address, where needed for bookings, records or correspondence;
booking details, including the course you book, course dates and attendance information;
payment and transaction information;
information you provide through our contact or enquiry forms;
medical or health information that may affect your ability to take part safely in a sailing course;
emergency contact details, where provided;
communications you send to us by email, form, phone, post or in person;
technical information about your use of our website, such as device, browser, pages visited and approximate location;
photographs or videos taken during courses, where appropriate.

4. How we collect personal information

We may collect personal information when you:

visit our website at prettysailing.com;
submit a contact or enquiry form;
make a booking through the embedded Broadreach Bookings system;
make a payment through the booking process;
complete a medical declaration or health form;
send information to us by email;
provide information in person or on paper;
contact us by phone or other communication methods;
attend one of our courses.

Medical declarations and health information may be collected through Broadreach Bookings, by email, in person, or on paper. We do not collect this information through the standard website enquiry form.

5. How we use your personal information

We use personal information to:

respond to enquiries;
manage course bookings;
provide sailing courses and related services;
process payments;
send booking confirmations and course information;
manage attendance and course participation;
assess whether a course is suitable and safe for you;
manage health, safety and emergency situations;
keep customer and course records;
deal with complaints, disputes, insurance matters or legal claims;
meet our legal, accounting and regulatory obligations;
maintain and improve our website;
understand how visitors use our website;
protect our website and forms from spam or misuse.

6. Medical and health information

Some courses may require participants to provide medical or health information. This may include information about physical or mental health conditions, medication, allergies, mobility, previous injuries, or anything else that may affect safe participation in a sailing course.

We use this information only where it is needed to assess course suitability, manage safety, make reasonable adjustments where possible, respond to emergencies, manage insurance or legal matters, or protect the wellbeing of participants, instructors and others.

We may keep medical and health information while you are an active or returning customer, so we can safely manage your course participation. We may ask you to confirm or update this information before future courses.

If you no longer book with us, we will only keep this information for as long as needed for safety, insurance, safeguarding, legal, dispute or record-keeping reasons.

7. Payments

Course bookings may be made through Broadreach Bookings, and payments may be processed by Stripe as part of the embedded booking flow on our website.

We do not store your full payment card details. Payment information is handled by the relevant payment provider, such as Stripe.

We may keep records of payments, invoices, refunds and transactions for accounting, tax, legal and business record purposes.

8. Website analytics and tracking

We may use Google Analytics 4 through Google Tag Manager to understand how visitors use our website.

This may collect information such as pages visited, time spent on the site, device and browser information, approximate location, and how visitors arrived at the website.

We use this information to improve the website and understand which pages are useful to visitors.

Analytics cookies and similar technologies should only be used where appropriate consent has been given. More information is available in our Cookie Policy.

9. Third-party content and services

Our website may use third-party services, including:

Broadreach Bookings for course bookings;
Stripe for payment processing;
Google Analytics and Google Tag Manager for website analytics and tag management;
Google Fonts to display website fonts;
Google reCAPTCHA or similar tools to help protect forms from spam or misuse;
YouTube and Vimeo for embedded videos;
Instagram or Meta for embedded social media content;
website hosting, maintenance, security and technical support providers.

These third parties may process personal information in order to provide their services. They may also collect technical information when their services are loaded or used.

10. Our lawful reasons for using personal information

We only use personal information where we have a lawful reason to do so.

What we use information for	Our lawful reason
Responding to enquiries	Legitimate interests, or taking steps before entering into a contract
Managing course bookings and providing courses	Contract
Processing payments and refunds	Contract and legal obligations
Keeping accounting, tax and business records	Legal obligations and legitimate interests
Using medical or health information for course safety and suitability	Explicit consent where required, vital interests in emergencies, and legitimate interests or legal claims where appropriate
Managing complaints, disputes, insurance matters or legal claims	Legitimate interests and legal claims
Using website analytics	Consent, where required
Protecting the website and forms from spam or misuse	Legitimate interests
Complying with legal or regulatory requirements	Legal obligations

11. Who we share personal information with

We may share personal information with trusted third parties where needed to operate our business, provide our services, keep people safe, or meet legal requirements.

This may include:

course instructors and staff;
Broadreach Bookings;
Stripe and other payment providers;
website hosting, maintenance, security and technical support providers;
Google, where we use services such as Analytics, Tag Manager, Fonts or reCAPTCHA;
YouTube, Vimeo, Instagram or Meta, where embedded content is used;
insurers and insurance brokers;
accountants, bookkeepers, legal advisers and other professional advisers;
training, certification or accreditation bodies, where relevant to the course;
emergency services, where needed for safety or emergency response;
regulators, public authorities, courts or law enforcement, where required by law.

We only share personal information where we have a proper reason to do so.

12. International transfers

Some of the third-party services we use may process personal information outside Gibraltar.

Where personal information is transferred internationally, we will take reasonable steps to make sure it is protected in line with applicable data protection requirements.

13. How long we keep personal information

We only keep personal information for as long as needed for the purpose it was collected, including for legal, accounting, tax, insurance, safeguarding, safety, dispute or record-keeping reasons.

Type of information	How long we usually keep it
General enquiries	Up to 12 months after the enquiry is resolved, unless it becomes a booking or we need to keep it for longer for a specific reason
Booking and customer records	Up to 6 years after the booking or course, where needed for accounting, legal, tax, insurance or dispute purposes
Payment and transaction records	Up to 6 years, where needed for accounting, tax, legal or business record purposes
Medical declarations and health information	While you are an active or returning customer, and after that only for as long as needed for safety, insurance, safeguarding, legal, dispute or record-keeping reasons
Paper forms	Stored securely and destroyed when no longer needed
Analytics data	Kept according to our Google Analytics settings

14. How we protect personal information

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.

This may include using secure systems, limiting access to personal information, storing paper records securely, using trusted service providers, and securely deleting or destroying information when it is no longer needed.

No website, email system or online service can be guaranteed to be completely secure. However, we take data protection seriously and aim to keep personal information safe.

15. Paper records

Some information, including medical declarations or course-related forms, may be collected on paper.

Paper records will be stored securely and only accessed by people who need the information for course safety, administration, legal, insurance or record-keeping purposes.

When paper records are no longer needed, they will be securely destroyed.

16. Photographs and videos

We may take photographs or videos during courses for promotional, training or record-keeping purposes.

If we plan to use photographs or videos for promotional purposes, such as on our website, social media or marketing materials, you can let us know if you do not wish to be photographed or filmed.

We will not intentionally use images in a way that is unfair, misleading or inappropriate.

17. Children

Our courses are not generally aimed at children or under-18s, and we do not knowingly collect personal information directly from children through our website.

If this changes, or if a course is made available to under-18s, we may require information to be provided by a parent or guardian and may update this Privacy Policy accordingly.

18. Your data protection rights

Depending on the circumstances, you may have rights over your personal information, including the right to:

ask for a copy of the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete personal information in certain circumstances;
ask us to restrict how we use your information in certain circumstances;
object to certain uses of your information;
ask for certain information to be transferred to another provider, where applicable;
withdraw consent where we rely on consent.

To make a request, please contact us at willow@prettysailing.gi.

We may need to confirm your identity before responding to a request.

19. Complaints

If you are unhappy with how we use your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Gibraltar Regulatory Authority, which is the data protection regulator in Gibraltar.

Gibraltar Regulatory Authority
2nd Floor, Eurotowers 4
1 Europort Road
Gibraltar

Website: https://www.gra.gi/data-protection/complaints

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, systems, legal requirements or how we use personal information.

When we make changes, we will update the “Last updated” date at the top of this page.

21. Contact us

If you have any questions about this Privacy Policy or how we use your personal information, please contact us: